Static task
static1
Behavioral task
behavioral1
Sample
2657d82d5e38105299c9bb2f29366f1a_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2657d82d5e38105299c9bb2f29366f1a_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2657d82d5e38105299c9bb2f29366f1a_JaffaCakes118
-
Size
6KB
-
MD5
2657d82d5e38105299c9bb2f29366f1a
-
SHA1
3210f196e4eeb1d26d39199cf8438a28ca8d1a7f
-
SHA256
7db240a612d51699f16d45048caf05ef3847704c6bc5736f4c9e046a095f06dd
-
SHA512
997507ccc062ed1ee7dc92158ccb8e94bd87f23eb9d4c6c00d78843a0b36db6435e18e0f410715639900724be80672563eff4e78ffc7c84aceb8ef7456ee2baa
-
SSDEEP
96:9jwM+FJdDxpvR2+gsz/rLBzRVuZpkuze7X9O65Q0ev2KoSPSXMe0eXhlP3OA:9EJdDxpo+gs7BE6uG9O65J3B2eX7/OA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2657d82d5e38105299c9bb2f29366f1a_JaffaCakes118
Files
-
2657d82d5e38105299c9bb2f29366f1a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE